MITRE fighter says CVE delays are no laughing matter, names bug ROFL in branding protest

Re: "routinely report MITRE is responsive"

Part of that may be due to how less recognized outfits often hype meaningless bugs trying to get attention for themselves. If you have a bug that requires multiple steps of stupidity and simply leaks information that others have on you anyway, it isn't deserving of a CVE.

Sad that researchers coming up with real bugs are having problems because of this, but if MITRE is trying to be responsible about only assigning them for real vulnerabilities the issue is more that the people doing that aren't recognizing stuff too well. If they're unsure, they should write an article at the Register about the bug. If it turns out to be nothing, generally the commentards have picked it apart pretty conclusively in a matter of hours!